You have a new Azure SQL database. The database contains a column that stores confidential information. You need to track each time values from the column are returned in a query. The tracking information must be stored for 365 days from the date the query was executed. Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Turn on auditing and write audit logs to an Azure Storage account.

Turn on Advanced Data Security for the Azure SQL server.

Apply sensitivity labels named Highly Confidential to the column.

Turn on auditing and write audit logs to an Azure Storage account.

Add extended properties to the column.

Turn on Advanced Data Security for the Azure SQL server.

Apply sensitivity labels named Highly Confidential to the column.

Turn on Azure Advanced Threat Protection (ATP).

You have 40 Azure SQL databases, each for a different customer. All the databases reside on the same Azure SQL Database server. You need to ensure that each customer can only connect to and access their respective database.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Create logins in the master database.

Implement row-level security (RLS).

Configure the database firewall.

Create logins in the master database.

You are developing an application that uses Azure Data Lake Storage Gen 2.You need to recommend a solution to grant permissions to a specific application for a limited time period. What should you include in the recommendation?

Azure Active Directory (Azure AD) identities

You have a data warehouse in Azure Synapse Analytics.You need to ensure that the data in the data warehouse is encrypted at rest.What should you enable?

Transparent Data Encryption (TDE)

Advanced Data Security for this database

Always Encrypted for all columns

You are designing a security model for an Azure Synapse Analytics dedicated SQL pool that will support multiple companies. You need to ensure that users from each company can view only the data of their respective company.Which two objects should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

a custom role-based access control (RBAC) role

You have an Azure subscription that contains an Azure Data Factory version 2 (V2) data factory named df1. DF1 contains a linked service. You have an Azure Key vault named vault1 that contains an encryption kay named key1.You need to encrypt df1 by using key1.What should you do first?

Remove the linked service from df1.

Disable purge protection on vault1.

Remove the linked service from df1.

Create a self-hosted integration runtime.

You have an Azure subscription that contains a server named Server1. Server1 hosts two Azure SQL databases named DB1 and DB2.You plan to deploy a Windows app named App1 that will authenticate to DB2 by using SQL authentication.You need to ensure that App1 can access DB2. The solution must meet the following requirements:App1 must be able to view only DB2.Administrative effort must be minimized.What should you create?

a contained database user from a Windows login for App1 on DB2

a contained database user for App1 on DB2

a contained database user from an external provider for App1 on DB2

a contained database user from a Windows login for App1 on DB2

You create five Azure SQL Database instances on the same logical server.In each database, you create a user for an Azure Active Directory (Azure AD) user named User1.User1 attempts to connect to the logical server by using Azure Data Studio and receives a login error.You need to ensure that when User1 connects to the logical server by using Azure Data Studio, User1 can see all the databases.What should you do?

Create User1 in the master database.

Assign User1 the db_datareader role for the master database.

Assign User1 the db_datareader role for the databases that User1 creates.

Grant SELECT on sys.databases to public in the master database.

You need to recommend which configuration to perform twice to enable access to the primary and secondary replicas of DB3. The solution must meet the availability requirements.What should you recommend?

Configure connection strings that reference the read-write listener.

Configure virtual network service endpoints.

Enable database firewall rules.

Create database-scoped credentials.

Configure connection strings that reference the read-write listener.

You need to recommend a process to automate the management of DB3. The solution must meet the management requirements. What should be the first step of the process?

Configure a private endpoint for connectivity to DB3.

Configure Microsoft Entra authentication for the logical server that hosts DB3.

Create a database that has database-scoped credentials.

Configure a private endpoint for connectivity to DB3.

Create data base-scoped credentials in DB3.

You need to identify the event_flle target for monitonng DB3 after the migration to Azure SQL Database. The solution must meet the management requirements,What should you use as the event_file target?

an Azure Blob Storage container

You need to identify the event_file target for monitonng DB3 after the migration to Azure SQL Database. The solution must meet the management requirements.What should you use as the event_file target?

an Azure Blob Storage container

Microsoft DP-300 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

HOTSPOT

You have SQL Server on an Azure virtual machine that contains a database named DB1.

The database reports a CHECKSUM error.

You need to recover the database.

How should you complete the statements? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Microsoft DP-300 image Question 1 5808903 10022024015907000

Correct answer:

Microsoft DP-300 image answer Question 1 5808903 10022024015907000

Comment (0)

Explanation:

Box 1: SINGLE_USER

The specified database must be in single-user mode to use one of the following repair options.

Box 2: REPAIR_ALLOW_DATA_LOSS

REPAIR_ALLOW_DATA_LOSS tries to repair all reported errors. These repairs can cause some data loss.

Note: The REPAIR_ALLOW_DATA_LOSS option is a supported feature but it may not always be the best option for bringing a database to a physically consistent state. If successful, the REPAIR_ALLOW_DATA_LOSS option may result in some data loss. In fact, it may result in more data lost than if a user were to restore the database from the last known good backup.

Incorrect Answers:

REPAIR_FAST

Maintains syntax for backward compatibility only. No repair actions are performed.

Box 3: MULTI_USER

MULTI_USER

All users that have the appropriate permissions to connect to the database are allowed.

Reference:

https://docs.microsoft.com/en-us/sql/t-sql/database-console-commands/dbcc-checkdb-transact-sql

asked 02/10/2024

Preety Koul

50 questions